Our options to send logs to Kinesis Firehose are very similar to the ones in CloudWatch logs. We could use the aws-kinesis-agent provided in the yum repo as a replacement for the awslogs agent, but, instead, we will demonstrate another way to do that. We are going to make our application send its logs directly to Kinesis instead of writing them on disk first.

Before making those changes, we will adjust the permissions to allow our instances to interact with Firehose.